IT Security Operations Analyst

**Position Summary**:
As an IT Security Operations Analyst you will be responsible for ongoing delivery of key security operations areas, including Security Event and Incident Management, Vulnerability Management, Audit Logging, and Threat Intelligence. You will also support the design, implementation and maintenance of key security controls and related technologies. Working in close partnership with various cross-functional areas within IT and external partners, you will assist with security technology selection and ensure that solutions are maintained in accordance with defined service levels. You possess technical and IT security domain expertise and have strong business acumen, helping to ensure that IT solutions balance business with IT security and compliance requirements. You will be responsible for executing all aspects of security operations, including the incident response process and participating in the on-call rotation. Hours of work are Monday to Friday - 7.5 hours daily or as required. After-hours support/on-call duties will be required.
**Position Responsibilities**:

- Execute established IT security operations processes, which support security and compliance roadmaps, mature 407 ETR’s operations and reduce risk and exposure
- Support the design and implementation of IT security operations processes and controls in conjunction with relevant stakeholders
- Execute the IT Security Incident Response process, coordinate security incidents investigations and recommended corrective actions
- Oversee vulnerability audits, assessments and associated remediation activities to ensure systems are configured in accordance with established policy, best practice guidelines and designated compliance frameworks
- Oversee processes designed to identify and communicate current and emerging threats and work with cross-functional teams to establish risk mitigation strategies where applicable
- Work closely with key stakeholders throughout the development and execution of new projects, backlog items and service requests to ensure that corporate information security objectives, including Secure System Development lifecycle adherence, are maintained
- Support the implementation, management and reporting of IT security compliance frameworks (PCI DSS, ISO 27001, GO ITS, etc.)
- Support the creation and maintenance of IT Security-related policies, standards, baselines, guidelines and procedures, ensuring alignment with designated security frameworks
- Participate in the testing of the IT Security Incident Response process
- Participate in the annual IT Security Risk Assessment and other ongoing operational processes as needed

**Qualifications**:

- Minimum of 3 years of IT security or related work experience, with 2 years of IT security operations work experience required
- College Diploma or University Degree in Computer Engineering or Computer Science preferred
- Experience executing IT Security operations processes, specifically Security Event and Incident Management / Response, Vulnerability Management, System Auditing / Logging, and Threat Intelligence
- Experience managing logging / SIEM platforms, and associated use cases and alerting
- Experience in management of Vulnerability Assessments and IT Security Audits required
- One or more of the security or technology specific certifications preferred
- Expertise in developing and implementing controls based on strong knowledge of IT security supporting technologies including but not limited to vulnerability management platforms, malware management technologies, and security event and incident management technologies
- Experience with the following IT Security Frameworks required: Payment Card Industry Data Security Standards (PCI DSS), ISO 27001 / 27002, Control Objectives for Information and Related Technology (COBIT)
- Working knowledge of software development practices and languages, include Secure Development Lifecycle practices
- Familiarity with Agile methodologies such as Lean, Scrum and Kanban preferred
- Strong sense of ownership and teamwork
- Strong ability to communicate and document clearly and effectively
- Ability to follow processes and guidelines
- Ability to work with all levels of staff
- Ability to take personal initiative and observe confidentiality
- Ability to work with internal and external vendors in a professional manner
- Ability to multi-task in a fast-paced environment**Note**: This job description is not intended to be all-inclusive. Employee may perform other related duties as negotiated to meet the ongoing needs of the organization.